mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
kevinveenbirkenbachandClaude Fable 5
0bf4397759
Cold onion probes need curl to outlive tor's internal 120s descriptor wait; the recreate path must force-update the tor_tor service in swarm instead of spawning a competing compose publisher; and a degraded Tor circuit fails single suites with pure timeouts, so failed roles get one retry on rotated circuits. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
46 lines
1.3 KiB
Bash
Executable File
46 lines
1.3 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Wait for an onion service to answer over the Tor SOCKS proxy. If it never
|
|
# comes up within the first attempt budget, recreate the Tor container once
|
|
# (fresh guards/circuits + descriptor republish) and retry the budget again.
|
|
#
|
|
# Args:
|
|
# $1 socks -- Tor SOCKS host:port
|
|
# $2 domain -- onion domain (plaintext http; Tor provides the encryption)
|
|
# $3 attempts -- probe attempts per pass
|
|
# $4 delay -- seconds between attempts
|
|
# $5 tor_dir -- svc-net-tor compose instance dir (for --force-recreate)
|
|
set -euo pipefail
|
|
|
|
socks="${1:?socks host:port required}"
|
|
domain="${2:?onion domain required}"
|
|
attempts="${3:?attempts required}"
|
|
delay="${4:?delay seconds required}"
|
|
tor_dir="${5:?tor compose dir required}"
|
|
|
|
url="http://${domain}/"
|
|
|
|
probe() {
|
|
local i
|
|
for ((i = 1; i <= attempts; i++)); do
|
|
if curl --silent --show-error --location --max-time 120 --socks5-hostname "${socks}" \
|
|
-o /dev/null "${url}"; then
|
|
return 0
|
|
fi
|
|
sleep "${delay}"
|
|
done
|
|
return 1
|
|
}
|
|
|
|
if probe; then
|
|
exit 0
|
|
fi
|
|
|
|
echo ">>> ${domain} did not answer in ${attempts} attempts; recreating Tor for fresh circuits"
|
|
if docker service inspect tor_tor >/dev/null 2>&1; then
|
|
docker service update --force tor_tor --detach
|
|
else
|
|
(cd "${tor_dir}" && compose up -d --force-recreate --remove-orphans)
|
|
fi
|
|
|
|
probe
|